CLAIMS 

Claims 1-55 (Canceled) 

56. (Currently Amended) A method comprising: 

electronically receiving , with an interface device, a definition of a first group identifying 
a first plurality of users; 

automatically generating , with a processing system, the first group having the first 
plurality of users according to the definition of the first group, where the first group is a private 
group having content available to one or more owners of the first group and unavailable to non- 
owners of the first group; 

electronically receivin g, with the interface device, a definition of a second group 
identifying a second plurality of users; 

automatically generatin g, with the processing system, the second group having the 
second plurality of users according to the definition of the second group, where the second group 
is a private group having content available to one or more owners of the second group and 
unavailable to non-owners of the second group; 

receiving a definition of a desired group with the interface device , where the definition of 
the desired group explicitly specifies that the first group is to be included in the desired group 
and explicitly specifies the second group is to be excluded from the desired group; and 

automatically generating , with a processing system, the desired group to include the first 
group and exclude the second group according to the received definition of the desired group, 
where the desired group includes the content of the first group, where the desired group is a 
public group allowing the content of the first group to be available to both the owners of the first 
and second groups and the non-owners of the first and second groups. 

57. (Previously Presented) The method of claim 56 where the definition of the first 
group or the second group identifies one or more properties shared by the users in the first group 
or the second group; and 

dynamically generating the first group or the second group according to the received 

definition. 
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58. (Previously Presented) The method of claim 56 where the definition of the first 
group or the second group statically defines the users in the group; and 

generating the first group or the second group according to the received definition. 

Claim 59 (Canceled) 

60. (Previously Presented) The method of claim 56 includes 

electronically receiving a definition of a third group of a plurality of users, where the 
third group is a public group having content available to both the owners of the first and second 
groups and the non-owners of the first and second groups; and 

electronically receiving a definition of a desired public group, where the definition of the 
desired public group specifies that the first group and the third group are to be included in the 
different desired group and the second group is to be excluded from the desired public group, 
where the desired group includes the content of the first group and the third group. 

61. (Previously Presented) The method of claim 56 includes electronically receiving a 
definition of a third group of a plurality of users, where the definition of the desired group 
specifies that the first group and the third group are to be included in the desired group and the 
second group is to be excluded from the desired group. 

62. (Previously Presented) The method of claim 56 includes electronically receiving a 
definition of a third group of a plurality of users, where the definition of the desired group 
specifies that the first group is to be included in the desired group and the second group and the 
third group are to be excluded fi:om the desired group. 

63. (Currently Amended) An apparatus comprising a computer-readable medium having 
instructions, when executed by a computational system including a processor or multiple 
communicating processors, cause the computational system to p e rform a m e thod comprising : 

recei ving a definition of a first group identifying a first plurality of u sersj 
generating generate, with the computational system, the a first group having the a first 
plurality of users according to tibte a definition of the first group received with an interface device 
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of the computational system , where the first group is a private group having content available to 
one or more owners of the first group and unavailable to non-ov^ners of the first group; 
receiving a definitio fl-ef-arsee ond group identifying a s e cond ph tfahty-ef-aserst 
gen e rating generate, with the computational system, tibe a second group having the a 
second plurality of users according to the a definition of the second group received with the 
interface device of the computational system, where the second group is a private group having 
content available to one or more owners of the second group and unavailable to non-owners of 
the second group; 

r e ceiving a d e fin it i on of a desired group, where the definition of the desired group 
specifies that the first group is to b e included in th e desired group and the s e cond group is to b e 
excluded from the desired group; and 

generating generate, with the computational system. #ie a desired group to include the 
first group and exclude the second group according to the receiv e d a definition of the desired 
group received with the interface device of the computational system , where the desired group 
includes the content of the first group, where the desired group is a public group allowing the 
content of the first group to be available to both the owners of the first and second groups and the 
non-owners of the first and second groups. 

64. (Currently Amended) The apparatus of claim 63 where the definition of the first 
group or the second group identifies one or more properties shared by the users in the first group 
or the second group[[;]]j and where the computational system is configured to dynamically 
g e nerating generate the first group or the second group according to the received definition. 

65. (Currently Amended) The apparatus of claim 63 where the definition of the first 
group or the second group statically defines the users in the group[[;]]i and where the 
computational system is configured to generate generating the first group or the second group 
according to the received definition. 

Claim 66 (Canceled) 
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67. (Currently Amended) The apparatus of claim 63 includ e s where the computational 
system is configured to: 

r e c e iving receive a definition of a third group of a plurality of users, where the third 
group is a public group available to both the owners of the first and second groups and the non- 
owners of the first and second groups; and 

receiving receive a definition of a desired public group, where the definition of the 
desired public group specifies that the first group and the third group are to be included in the 
different desired group and the second group is to be excluded from the desired public group, 
where the desired group includes the content of the first group and the third group. 

68. (Currently Amended) The apparatus of claim 63 includes where the computational 
system is configured to receiving receive a definition of a third group of a plurality of users, 
where the definition of the desired group specifies that the first group and the third group are to 
be included in the desired group and the second group is to be excluded from the desired group. 

69. (Currently Amended) The apparatus of claim 63 includes where the computational 
system is configured to receiving receive a definition of a third group of a plurality of users, 
where the definition of the desired group specifies that the first group is to be included in the 
desired group and the second group and the third group are to be excluded from the desired 
group. 

Claims 70-76 (Canceled) 

77. (Previously Presented) A device comprising: 

an interface to receive definitions of a plurality of groups, each group specifying a 
plurality of items and indicating that the group is either available for inclusion into a desired 
group or not available for inclusion into the desired group, where a definition of the desired 
group explicitly specifies that a first group is to be included in the desired group and explicitly 
specifies a second group is to be excluded from the desired group, where the first group is a 
private group having content available to one or more owners of the first group and unavailable 
to non-owners of the first group, where the second group is a private group having content 
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available to one or more owners of the second group and unavailable to non-owners of the 
second group; and 

a processing system to generate a desired group from at least one of the plurality of 
groups available for inclusion into the desired group and exclude all of the plurality of groups not 
available for inclusion into the desired group according to the received definition of the desired 
group, where the desired group includes the content of the first group, where the desired group is 
a public group allowing the content of the first group to be available to both the owners of the 
first and second groups and the non-owners of the first and second groups. 

78. (Previously Presented) The device of claim 77 where the definition of the at least 
one of the plurality of groups identifies one or more properties shared by the items in the group, 
where the processing system is configured to generate the group according to the received 
definition. 

79. (Previously Presented) The device of claim 77 where the definition of the at least 
one of the plurality of groups statically defines the items in that group, and where the processing 
system is configtired to generate the group according to the received definition. 

Claim 80 (Canceled) 

8 1 . (Previously Presented) The device of claim 77 where the processing system is 
configured to generate another desired group from at least one of the plurality of groups 
available for inclusion into the another desired group and the previously generated desired group, 
the processing system excluding all of the plurality of groups not available for inclusion into the 
desired group. 

82. (Previously Presented) The device of claim 77 where the processing system is 
configured to manage security of communications over a network according to at least one of the 
desired group or the plurality of groups, the processing system to manage security of 
communications over a network by associating one or more network security privileges or 
resources accessible on the network with the desired group or the plurality of groups. 
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83. (Previously Presented) The apparatus of claim 63 where the definition explicitly 
specifies that the first group is to be included in the desired group and explicitly specifies the 
second group is to be excluded from the desired group. 

Claims 84 (Canceled) 

85. (Previously Presented) The device of claim 77 where the definition explicitly 
specifies that the first group is to be included in the desired group and explicitly specifies the 
second group is to be excluded from the desired group. 
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